Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20839faa-7573-3b5e-899f-f74343d64e95.roa
File:                     20839faa-7573-3b5e-899f-f74343d64e95.roa (raw, json)
Hash identifier:          AH6e/CeFwiK/Cw2etrJVoxUkwwBSspuBPPfagyv7gHk=
Subject key identifier:   2C:C5:33:6A:99:CA:22:F8:43:9A:B1:3E:3C:28:64:75:02:A3:89:00
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849806F3CAF9149670F4A987500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20839faa-7573-3b5e-899f-f74343d64e95.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        2600:1418:e000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:3c:af:91:49:67:0f:4a:98:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=1a2bcb6e-2289-4b1f-8176-f15209fda0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7b:61:5d:76:8d:33:43:04:68:dd:02:80:0e:
                    48:a5:9f:59:55:b0:60:6d:d4:8f:05:af:ee:e3:e0:
                    0f:24:0b:0f:37:74:e2:2e:76:e0:85:5b:70:1d:82:
                    1a:81:0b:fa:60:a6:20:24:bd:00:ff:00:b2:6e:53:
                    e3:d2:40:62:84:45:74:28:eb:d8:14:64:52:c4:75:
                    ce:06:f4:0d:a0:59:64:1c:d6:98:21:47:b4:10:cf:
                    c3:72:ce:55:db:12:c7:bf:84:d3:69:53:1b:05:9c:
                    b5:35:86:52:04:65:bf:b6:e5:e3:fb:c1:76:a8:b2:
                    77:92:c6:13:69:4d:0a:ff:c0:9d:48:32:1e:68:65:
                    17:03:69:32:28:68:76:e9:3f:d5:64:64:16:58:31:
                    36:10:cb:e6:6c:47:8e:50:18:c1:a0:8d:7c:dc:9f:
                    52:21:2a:86:4b:1e:37:06:03:4a:7b:bb:25:d6:80:
                    b7:9a:18:38:09:85:ec:83:f3:5e:0d:e8:3d:4e:96:
                    ef:5e:b8:e4:17:c6:66:13:32:0a:dd:20:6d:a7:b3:
                    b0:d9:4a:78:5b:19:91:ab:bc:49:8b:5e:16:68:29:
                    b2:5b:14:5c:a7:fc:52:30:24:ef:45:92:61:9f:d2:
                    17:85:b7:a1:61:44:4c:1d:3c:a1:d5:0c:00:9d:c6:
                    97:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C5:33:6A:99:CA:22:F8:43:9A:B1:3E:3C:28:64:75:02:A3:89:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20839faa-7573-3b5e-899f-f74343d64e95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1418:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:27:4b:ab:80:d7:03:04:be:14:9a:fc:0c:86:68:fb:c1:87:
         f8:fd:02:02:75:e2:07:a4:d4:fd:df:83:8c:31:e5:91:bf:01:
         67:2d:93:4d:c6:a3:9e:fa:31:0e:f1:eb:14:c2:d3:47:8c:06:
         86:ec:c8:c5:a8:80:c5:4e:1c:2c:04:20:53:7d:05:c4:4a:51:
         b4:6e:c3:45:c6:79:39:2a:bb:11:f9:cc:bf:1e:50:6a:17:dd:
         dd:c2:00:43:69:67:6c:4a:98:51:b4:3b:35:51:dc:d4:8a:af:
         38:00:30:31:2b:04:ac:bc:a0:39:88:80:aa:0f:06:c4:f6:6b:
         f8:03:9f:1a:2b:ce:02:5f:49:2c:49:20:b3:3f:7c:7f:cb:3b:
         61:81:b0:82:2a:35:da:07:88:62:61:c1:f1:37:db:94:51:3d:
         b5:5c:3a:5d:40:f3:4c:a7:ff:cf:2b:23:c7:83:06:91:07:da:
         c9:ca:83:d6:23:5a:1b:05:3c:0e:3d:b3:84:4d:9d:77:6b:b9:
         45:63:bd:5e:0e:ac:19:71:f0:a6:58:45:6f:52:f1:f7:30:32:
         21:7e:f6:08:59:eb:9a:7b:0c:32:43:49:1b:10:c5:6b:c3:52:
         9f:ee:5e:98:e3:e4:75:b5:25:f6:e0:40:14:b7:a7:2d:d9:46:
         48:ef:db:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:37 2025 by rpki-client on console.sobornost.net